PRIVACY POLICY (PDPA & GLOBAL COMPLIANCE)

2.1 Commitment to Privacy

ATCEN protects personal data in full compliance with the Malaysian Personal Data Protection Act 2010 (PDPA) and international privacy frameworks (including GDPR).

2.2 Information We Collect

Contact & Identity Data: Full name, designation, corporate email, phone number, company name, billing address.
Transactional & Training Data: Payment records, course attendance, HRD Corp grant details, assessment marks.
Technical & Telemetry Data: IP addresses, login timestamps, platform activity logs, and system telemetry.

2.3 Purpose of Processing

Data is collected to deliver training, provision SaaS software accounts, process billing, fulfill HRD Corp statutory requirements, provide software updates, and comply with legal obligations.

2.4 Data Sharing & Third Parties

Personal data is never sold or rented. Data is shared strictly under confidentiality agreements with payment gateways, cloud infrastructure providers, accredited trainers, and statutory bodies (e.g., HRD Corp).

2.5 Data Security & Retention

ATCEN implements SSL/TLS encryption, firewall protection, and strict role-based access control. Data is retained only as long as required for legal, tax, or operational compliance.

2.6 Data Subject Rights & Turnaround SLA

Data subjects possess rights to request access to, correction of, or withdrawal of consent for personal data. In compliance with PDPA guidelines, ATCEN will process and respond to verified Data Subject Requests (DSR) within twenty-one (21) calendar days of receipt. Requests must be submitted in writing to privacy@atcen.com.